Exam CISA topic 1 question 541 discussion

Answer should be C

C. Classification of data 🔍 Why this is the correct answer: Data classification defines the sensitivity and criticality of the data (e.g., public, internal, confidential, restricted). The classification determines: How securely the data must be disposed of Whether it must be shredded, wiped, degaussed, or physically destroyed The level of risk if the data were to be improperly disposed In other words, the more sensitive the data, the more stringent the disposal method must be — making classification the starting point for secure disposal procedures.

The retention policy will have the dispose procedure

While the type of media used for data storage (option A) is a factor to consider in the disposal process, it does not provide the full context needed to determine the appropriate disposal procedures. The classification of data guides decisions regarding the level of protection and disposal methods required, regardless of the type of media used.

The question is about the "procedure" for safe disposal, not about any criteria for disposal per se. The procedure for safe disposal depends on the storage medium. Therefore, the answer only possible answer is 'A. Type of media used for data storage.'

D, this is because the data retention policy normally incorporates data classification and must be aligned with environmental regulations.

procedures, could equal policy

i think D is right as procedures should be based on policy